Escaping the Safari sandbox with a kernel GPU bug
googleprojectzero.blogspot.com
Escaping the Safari sandbox with a kernel GPU bug
1–10 of 31 posts
Re: Escaping the Safari sandbox with a kernel GPU bug
#2Thank you for sharing, this is a very good reading.
I purchased a book about using buffer overflow to hack stuff. but I'm wondering how those kernel bugs were discovered?
Re: Escaping the Safari sandbox with a kernel GPU bug
#3This writeup, and the first part of this series, are amazing and incredibly instructive.
But they make me embarrassed that anyone still runs or writes code that is so without memory safety that these bugs can exist.
Re: Escaping the Safari sandbox with a kernel GPU bug
#4Thank you for sharing, this is a very good reading. I purchased a book about using buffer overflow to hack stuff. but I'm wondering how those kernel bugs were discovered?
What was the title of the book you purchased? Can you share its name?
Re: Escaping the Safari sandbox with a kernel GPU bug
#5Thank you for sharing, this is a very good reading. I purchased a book about using buffer overflow to hack stuff. but I'm wondering how those kernel bugs were discovered?
If you want an excellent book on kernel security, I'd suggest buying "A Guide to Kernel Exploitation: Hacking the Core". It's a fairly technical book, so I wouldn't recommend it unless you have exploit and modern operating systems experience, but it's a good book that covers every major platform and a lot of details.
It's probably one of the best technical security related books I've ever read.
Re: Escaping the Safari sandbox with a kernel GPU bug
#6Thank you for sharing, this is a very good reading. I purchased a book about using buffer overflow to hack stuff. but I'm wondering how those kernel bugs were discovered?
What was the title of the book you purchased? Can you share its name?
sure, this is the book:
http://www.amazon.com/gp/product/1593271441/ref=oh_aui_detai...
Hacking: The Art of Exploitation, 2nd Edition
Re: Escaping the Safari sandbox with a kernel GPU bug
#7Thank you for sharing, this is a very good reading. I purchased a book about using buffer overflow to hack stuff. but I'm wondering how those kernel bugs were discovered?
If you want an excellent book on kernel security, I'd suggest buying "A Guide to Kernel Exploitation: Hacking the Core". It's a fairly technical book, so I wouldn't recommend it unless you have exploit and modern operating systems experience, but it's a good book that covers every major platform and a lot of details. It's probably one of the best technical security related books I've ever read.
thank you so much for the info, I will take a look.
Re: Escaping the Safari sandbox with a kernel GPU bug
#8Amazing writeup. An attack from top (javascript) to bottom (kernel bugs), while very clearly explaining the discovery and exploit of vulnerability in each layer. The attack is very impressive, and the writeup makes it seem easy, which is a great compliment on the clarity of the writing.
Of course, and as mentioned at the end, the actual discovery process was much messier :)
As a bonus, there are a lot of links to other interesting documents as well.
Re: Escaping the Safari sandbox with a kernel GPU bug
#9Thank you for sharing, this is a very good reading. I purchased a book about using buffer overflow to hack stuff. but I'm wondering how those kernel bugs were discovered?
If you want an excellent book on kernel security, I'd suggest buying "A Guide to Kernel Exploitation: Hacking the Core". It's a fairly technical book, so I wouldn't recommend it unless you have exploit and modern operating systems experience, but it's a good book that covers every major platform and a lot of details. It's probably one of the best technical security related books I've ever read.
Thanks much for info on this book
Re: Escaping the Safari sandbox with a kernel GPU bug
#10Earlier quoted context omitted.
What was the title of the book you purchased? Can you share its name?
sure, this is the book: http://www.amazon.com/gp/product/1593271441/ref=oh_aui_detai... Hacking: The Art of Exploitation, 2nd Edition
There's also:
A Guide to Kernel Exploitation: Attacking the Core
...if you're interested in the kernel level exploits.
disclaimer: A co-worker of mine co-authored it.